Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
File: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft (raw, json)
Hash identifier: 7PDXEbwVg51+BDH/Kv3WuGpi/GIZbHn2kS9jqCjL6dA=
Subject key identifier: 6F:61:4C:80:34:DE:0B:38:A8:4A:60:65:11:82:A3:3C:71:F7:5A:BD
Authority key identifier: 36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
Certificate issuer: /CN=36be697c8489f482220f5c4064babe4c83c419d6
Certificate serial: 019D386609512600415CBAB922F9D79D1215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
Manifest number: 0D1E
Signing time: Sun 29 Mar 2026 07:01:44 +0000
Manifest this update: Sun 29 Mar 2026 07:01:44 +0000
Manifest next update: Mon 30 Mar 2026 07:01:44 +0000
Files and hashes: 1: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl (hash: x805UYrmlrOlhUVLwJ/QPM0SPaefYZ5ZMEZL9Mr3oqo=)
2: V7ehPHGc-IPjCptiIqNGOp1gBiE.roa (hash: J/1jCxZxkRbRLNpc2zFMuakcbWm535PWrbp1jxC/YvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:09:51:26:00:41:5c:ba:b9:22:f9:d7:9d:12:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36be697c8489f482220f5c4064babe4c83c419d6
Validity
Not Before: Mar 29 07:01:44 2026 GMT
Not After : Mar 30 07:01:44 2026 GMT
Subject: CN=6f614c8034de0b38a84a60651182a33c71f75abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bb:7b:05:c1:12:96:78:e3:b3:98:a2:ad:59:
4a:d3:c2:27:79:83:61:ca:87:e2:ec:3e:3f:f9:b3:
a3:37:c5:60:89:c0:14:a8:07:c7:25:e0:c6:60:93:
ab:4f:a9:f1:29:9a:2d:7c:24:07:8f:ed:a4:08:9a:
51:dc:2e:ad:34:f6:d4:25:54:d5:f0:6c:6e:29:b2:
fb:22:bb:51:b8:b0:77:5d:f7:1f:f7:ad:d7:e9:66:
98:e4:34:52:83:70:d5:94:b8:b2:ab:c1:af:36:5d:
b5:3f:5e:5f:e4:20:0b:99:b8:c1:0d:ff:79:f0:41:
de:c2:c7:d9:66:d4:08:9f:8f:f4:6d:43:7e:c2:85:
a1:59:44:3b:a6:86:80:e1:c7:3b:9f:8e:ae:81:6c:
22:56:81:f6:34:43:fb:66:1a:3a:f5:64:91:90:1b:
a0:c7:22:4b:15:c6:96:fe:90:5b:7d:a5:88:35:9a:
4f:b2:d3:9c:9e:fe:31:5c:18:24:40:91:cc:f2:89:
c4:96:13:60:9b:05:9c:13:6f:fe:a1:a0:0b:5b:30:
2c:39:c6:41:31:6e:f6:c4:31:97:9c:3d:eb:93:13:
96:5c:42:75:60:ce:9b:8d:f7:49:32:5e:a2:df:17:
bd:88:a9:dd:18:5d:ed:66:7a:a7:15:ec:88:76:de:
d2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:61:4C:80:34:DE:0B:38:A8:4A:60:65:11:82:A3:3C:71:F7:5A:BD
X509v3 Authority Key Identifier:
keyid:36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:91:6c:37:b5:6d:d0:27:2f:76:a4:4a:2c:92:59:97:44:c6:
ec:ff:49:3f:1f:13:32:a5:22:9f:97:cd:30:8e:4d:52:96:ec:
26:ed:23:57:64:9a:a8:9d:18:7b:4b:98:87:9b:f6:14:83:8d:
98:71:90:75:32:0d:d7:c2:13:62:6e:98:8d:25:4a:10:dd:bf:
14:af:d5:fd:a9:02:df:e4:72:44:6d:ba:66:c0:16:9b:d7:bc:
84:28:77:b2:98:a6:08:6c:bd:28:af:2c:00:be:a6:38:f1:0c:
28:51:df:84:50:24:be:89:e0:50:e3:79:19:e3:2d:ec:0e:4d:
2c:4c:17:89:a1:8f:79:09:83:a5:6c:7a:c4:46:ce:6f:41:3f:
4b:86:33:71:c9:05:75:9e:9f:e9:7b:5e:1c:5b:92:59:d8:ed:
a7:d1:84:bd:df:27:75:cd:4c:6e:3c:8b:18:76:80:ee:c8:ae:
89:de:66:b6:ef:b4:9d:61:6f:ca:36:18:db:38:75:89:9c:f9:
80:3d:98:d3:0e:4a:93:be:ca:9d:1b:4d:1f:0a:2a:9a:4c:b7:
3b:d2:e3:62:f7:63:1d:ac:3b:1a:06:f8:67:cf:8a:e7:c8:fb:
c9:c4:75:3a:72:00:57:4c:00:b8:66:d0:1b:d9:ab:1c:89:5c:
51:20:00:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZglRJgBBXLq5IvnXnRIVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YmU2OTdjODQ4OWY0ODIyMjBmNWM0MDY0YmFiZTRjODNj
NDE5ZDYwHhcNMjYwMzI5MDcwMTQ0WhcNMjYwMzMwMDcwMTQ0WjAzMTEwLwYDVQQD
Eyg2ZjYxNGM4MDM0ZGUwYjM4YTg0YTYwNjUxMTgyYTMzYzcxZjc1YWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Lt7BcESlnjjs5iirVlK08IneYNh
yofi7D4/+bOjN8VgicAUqAfHJeDGYJOrT6nxKZotfCQHj+2kCJpR3C6tNPbUJVTV
8GxuKbL7IrtRuLB3Xfcf963X6WaY5DRSg3DVlLiyq8GvNl21P15f5CALmbjBDf95
8EHewsfZZtQIn4/0bUN+woWhWUQ7poaA4cc7n46ugWwiVoH2NEP7Zho69WSRkBug
xyJLFcaW/pBbfaWINZpPstOcnv4xXBgkQJHM8onElhNgmwWcE2/+oaALWzAsOcZB
MW72xDGXnD3rkxOWXEJ1YM6bjfdJMl6i3xe9iKndGF3tZnqnFeyIdt7ScQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9hTIA03gs4qEpgZRGCozxx91q9MB8GA1UdIwQY
MBaAFDa+aXyEifSCIg9cQGS6vkyDxBnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2M1OWMtZDI1Ny00OGFjLWJhMzMt
YjBlZWFkN2MyNDg4LzEvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wM2M1OWMtZDI1Ny00OGFjLWJhMzMtYjBlZWFkN2MyNDg4
LzEvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5FsN7Vt
0CcvdqRKLJJZl0TG7P9JPx8TMqUin5fNMI5NUpbsJu0jV2SaqJ0Ye0uYh5v2FION
mHGQdTIN18ITYm6YjSVKEN2/FK/V/akC3+RyRG26ZsAWm9e8hCh3spimCGy9KK8s
AL6mOPEMKFHfhFAkvongUON5GeMt7A5NLEwXiaGPeQmDpWx6xEbOb0E/S4YzcckF
dZ6f6XteHFuSWdjtp9GEvd8ndc1MbjyLGHaA7siuid5mtu+0nWFvyjYY2zh1iZz5
gD2Y0w5Kk77KnRtNHwoqmky3O9LjYvdjHaw7Ggb4Z8+K58j7ycR1OnIAV0wAuGbQ
G9mrHIlcUSAASA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:12 2026 by rpki-client